Traffic Trace Info
DumpFile: 200801311400.dump
FileSize: 1645.17MB
Id: 200801311400
StartTime: Thu Jan 31 14:00:01 2008
EndTime: Thu Jan 31 14:15:00 2008
TotalTime: 899.86 seconds
TotalCapSize: 1291.61MB CapLen: 96 bytes
# of packets: 23170134 (14491.21MB)
AvgRate: 135.09Mbps stddev:30.52M
IP flow (unique src/dst pair) Information
# of flows: 707851 (avg. 32.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 3.1% 1.6% 1.4% 1.3% 1.2% 1.2% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 408041
Top 10 bandwidth usage (bytes/total in %):
10.5% 6.7% 4.6% 3.9% 3.9% 3.2% 3.0% 2.7% 2.4% 2.2%
# of IPv6 addresses: 1181
Top 10 bandwidth usage (bytes/total in %):
11.8% 8.7% 7.4% 7.2% 7.2% 5.0% 4.9% 4.8% 4.6% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801311400.pktlen.png)
detailed numbers
[ 32- 63]: 4287426
[ 64- 127]: 7480694
[ 128- 255]: 1083787
[ 256- 511]: 603566
[ 512- 1023]: 645748
[ 1024- 2047]: 9068913
Protocol Breakdown
![[protocol breakdown chart]](200801311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23170134 (100.00%) 15195131627 (100.00%) 655.81
ip 23151935 ( 99.92%) 15191986906 ( 99.98%) 656.19
tcp 19415504 ( 83.80%) 14644867411 ( 96.38%) 754.29
http(s) 7355970 ( 31.75%) 9590991622 ( 63.12%) 1303.84
http(c) 3567989 ( 15.40%) 474273532 ( 3.12%) 132.92
squid 773262 ( 3.34%) 621962809 ( 4.09%) 804.34
smtp 491494 ( 2.12%) 125146027 ( 0.82%) 254.62
ftp 41659 ( 0.18%) 4884007 ( 0.03%) 117.24
pop3 6199 ( 0.03%) 2266724 ( 0.01%) 365.66
imap 3595 ( 0.02%) 469805 ( 0.00%) 130.68
telnet 349 ( 0.00%) 23053 ( 0.00%) 66.05
ssh 2432604 ( 10.50%) 369631410 ( 2.43%) 151.95
dns 3613 ( 0.02%) 305464 ( 0.00%) 84.55
bgp 210 ( 0.00%) 78025 ( 0.00%) 371.55
napster 46 ( 0.00%) 5747 ( 0.00%) 124.93
realaud 8 ( 0.00%) 488 ( 0.00%) 61.00
rtsp 19630 ( 0.08%) 13612281 ( 0.09%) 693.44
icecast 30603 ( 0.13%) 33528112 ( 0.22%) 1095.58
hotline 8 ( 0.00%) 487 ( 0.00%) 60.88
other 4688264 ( 20.23%) 3407687758 ( 22.43%) 726.85
udp 3079540 ( 13.29%) 472406913 ( 3.11%) 153.40
dns 1609800 ( 6.95%) 209452372 ( 1.38%) 130.11
realaud 80 ( 0.00%) 8441 ( 0.00%) 105.51
halflif 16 ( 0.00%) 2017 ( 0.00%) 126.06
starcra 45 ( 0.00%) 7319 ( 0.00%) 162.64
everque 66 ( 0.00%) 12924 ( 0.00%) 195.82
unreal 141 ( 0.00%) 11865 ( 0.00%) 84.15
quake 29 ( 0.00%) 2793 ( 0.00%) 96.31
cuseeme 6 ( 0.00%) 774 ( 0.00%) 129.00
other 1469319 ( 6.34%) 262886315 ( 1.73%) 178.92
icmp 494230 ( 2.13%) 46612342 ( 0.31%) 94.31
ipip 331 ( 0.00%) 39014 ( 0.00%) 117.87
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 898 ( 0.00%) 110208 ( 0.00%) 122.73
other 161252 ( 0.70%) 27931218 ( 0.18%) 173.21
frag 12448 ( 0.05%) 10876889 ( 0.07%) 873.79
ip6 18199 ( 0.08%) 3144721 ( 0.02%) 172.80
tcp6 2319 ( 0.01%) 538858 ( 0.00%) 232.37
http(s) 1 ( 0.00%) 74 ( 0.00%) 74.00
http(c) 106 ( 0.00%) 11553 ( 0.00%) 108.99
smtp 541 ( 0.00%) 369103 ( 0.00%) 682.26
bgp 86 ( 0.00%) 10039 ( 0.00%) 116.73
other 1585 ( 0.01%) 148089 ( 0.00%) 93.43
udp6 10474 ( 0.05%) 1938654 ( 0.01%) 185.09
dns 9633 ( 0.04%) 1713706 ( 0.01%) 177.90
other 841 ( 0.00%) 224948 ( 0.00%) 267.48
icmp6 5371 ( 0.02%) 659090 ( 0.00%) 122.71
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5 ( 0.00%) 4039 ( 0.00%) 807.80
tcpdump file: 200801311400.dump.gz (593.95 MB)